SimpleRisk 20170416-001 Cross Site Scripting

history.pushState'', '', '/' alert1" input type="submit" value="XSS 1"...